CVE-2011-2727
Last modified
CVE-2011-2727 is a vulnerability of currently unknown severity. The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.. EPSS estimates a 1.53% chance of exploitation in the next 30 days.
Description
The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tribiq | Tribiq Cms | <= 5.2.7b |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-2727?
How severe is CVE-2011-2727?
How do I fix CVE-2011-2727?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-2721Off-by-one error in the cli_hm_scan function in matcher-hash…
- CVE-2011-2722The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp…
- CVE-2011-2723The skb_gro_header_slow function in include/linux/netdevice.…
- CVE-2011-2724The check_mtab function in client/mount.cifs.c in mount.cifs…
- CVE-2011-2725Directory traversal vulnerability in Ark 4.7.x and earlier a…
- CVE-2011-2726An access bypass issue was found in Drupal 7.x before versio…7.5
- CVE-2011-2728The bsd_glob function in the File::Glob module for Perl befo…
- CVE-2011-2729native/unix/native/jsvc-unix.c in jsvc in the Daemon compone…
- CVE-2011-2730VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5…
- CVE-2011-2731Race condition in the RunAsManager mechanism in VMware Sprin…
- CVE-2011-2732CRLF injection vulnerability in the logout functionality in …
- CVE-2011-2733EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP…
Are you affected by CVE-2011-2727?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST